Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa
File: c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa (raw, json)
Hash identifier: K+c2Fn62ZbBfSMqmXnRro31jl/iZLmvOZmxKHbn/V+g=
Subject key identifier: 55:FB:A2:79:93:F8:5F:E9:F7:D5:56:D0:6C:CD:15:D8:EB:FB:0D:8A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848D9C20BBB1B228AC48CBE9C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa
Signing time: Tue 11 Feb 2025 20:08:17 +0000
ROA not before: Tue 11 Feb 2025 20:08:17 +0000
ROA not after: Mon 12 May 2025 19:08:17 +0000
asID: 3855
IP address blocks: 199.172.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:c2:0b:bb:1b:22:8a:c4:8c:be:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 11 20:08:17 2025 GMT
Not After : May 12 19:08:17 2025 GMT
Subject: CN=238645bd-db12-4403-9a8a-6af267cc6fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:83:6a:d4:e0:99:7d:1e:11:9b:64:c7:01:6a:
f9:96:0e:6e:78:ba:70:cd:eb:1b:90:ee:f8:e4:e6:
20:0c:7c:fa:ed:51:b5:25:ec:10:73:b3:f0:b2:59:
e6:f6:c8:c0:b6:2a:9e:9d:a5:20:52:a4:29:71:ad:
95:9c:83:1d:c3:fa:fe:ef:01:e7:69:8e:0e:2c:0b:
9c:ac:31:dc:c3:55:c3:6e:14:37:e0:f6:85:35:f4:
a3:e1:db:84:c1:0a:43:62:86:b6:c0:23:73:b1:3b:
60:96:90:f9:89:5c:a0:85:d6:f6:9c:a9:56:90:53:
89:d9:83:1f:e8:fd:08:32:fe:c0:0b:6f:23:90:e7:
1f:fb:8c:ec:99:65:44:c8:89:70:bb:6d:a5:31:53:
50:79:c8:8b:6b:45:86:bb:19:c2:13:bc:ca:b9:dd:
1f:e5:a1:9c:12:3f:0b:a1:cd:63:04:bd:16:0e:77:
57:9d:4e:d4:03:2b:b0:b5:89:8b:24:48:1d:0e:20:
fc:af:d5:e8:14:69:cb:d5:50:84:4a:89:90:0f:02:
d5:d8:eb:76:50:79:d6:fe:af:f4:6c:bf:38:43:55:
5a:72:ea:06:8c:9f:86:eb:81:a0:a9:33:52:a9:57:
21:54:85:b6:eb:0f:aa:dc:92:0c:2f:68:ea:f2:d7:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FB:A2:79:93:F8:5F:E9:F7:D5:56:D0:6C:CD:15:D8:EB:FB:0D:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.172.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:27:38:44:00:d9:7d:59:42:d3:b2:f4:f3:c4:f0:b5:9c:58:
5b:f7:3d:a7:96:a5:1c:0c:36:b3:91:10:60:07:cb:8e:49:55:
5f:de:5a:0a:4e:de:cd:ad:3b:c7:33:76:c2:c8:d0:9b:74:6a:
11:ea:66:e0:04:74:a4:3c:62:6b:a6:72:4b:18:ea:26:48:ae:
7f:9e:61:d3:62:ea:46:47:cc:b2:88:6e:6f:5c:ee:1d:2b:80:
9f:7f:b0:49:93:aa:73:fb:e1:a1:61:9a:d4:35:dd:5f:8c:80:
18:a1:c9:e1:fb:b0:c9:d3:79:ba:06:d9:ce:53:e0:49:c0:2c:
d9:b4:e6:04:28:d0:ad:aa:3f:f0:47:fd:4b:94:89:e1:90:b2:
cb:d9:3b:b5:0e:e7:c9:3f:46:27:4b:01:b1:49:05:5d:ba:2b:
a9:a8:eb:ed:2a:5b:38:c3:22:8d:a2:6f:c3:fb:d5:37:86:c5:
0b:60:b4:62:c2:38:32:a3:b0:d1:41:b2:07:e1:c1:7a:86:63:
b5:d9:6d:12:ae:66:98:0d:25:84:fb:e1:09:48:46:a2:e3:60:
08:2a:3a:5f:cc:8f:ed:06:a8:78:cc:b3:19:fe:b7:af:b9:5d:
9e:5d:91:17:6b:c0:20:ef:fc:11:6b:f0:8f:50:0c:1a:96:3c:
51:10:ef:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZwgu7GyKKxIy+nAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIxMTIwMDgxN1oXDTI1MDUxMjE5MDgxN1owLzEtMCsGA1UEAxMk
MjM4NjQ1YmQtZGIxMi00NDAzLTlhOGEtNmFmMjY3Y2M2ZmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoNq1OCZfR4Rm2THAWr5lg5ueLpwzesbkO74
5OYgDHz67VG1JewQc7Pwslnm9sjAtiqenaUgUqQpca2VnIMdw/r+7wHnaY4OLAuc
rDHcw1XDbhQ34PaFNfSj4duEwQpDYoa2wCNzsTtglpD5iVyghdb2nKlWkFOJ2YMf
6P0IMv7AC28jkOcf+4zsmWVEyIlwu22lMVNQeciLa0WGuxnCE7zKud0f5aGcEj8L
oc1jBL0WDndXnU7UAyuwtYmLJEgdDiD8r9XoFGnL1VCESomQDwLV2Ot2UHnW/q/0
bL84Q1VacuoGjJ+G64GgqTNSqVchVIW26w+q3JIML2jq8tc5vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFX7onmT+F/p99VW0GzNFdjr+w2KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzRlYTAyMjEtNTRhMS0z
MGExLWE3MGYtNTczOTk2MWQxYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8nOEQA2X1ZQtOy9PPE8LWcWFv3PaeWpRwMNrOREGAHy45JVV/eWgpO
3s2tO8czdsLI0Jt0ahHqZuAEdKQ8YmumcksY6iZIrn+eYdNi6kZHzLKIbm9c7h0r
gJ9/sEmTqnP74aFhmtQ13V+MgBihyeH7sMnTeboG2c5T4EnALNm05gQo0K2qP/BH
/UuUieGQssvZO7UO58k/RidLAbFJBV26K6mo6+0qWzjDIo2ib8P71TeGxQtgtGLC
ODKjsNFBsgfhwXqGY7XZbRKuZpgNJYT74QlIRqLjYAgqOl/Mj+0GqHjMsxn+t6+5
XZ5dkRdrwCDv/BFr8I9QDBqWPFEQ7yg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:47 2025 by rpki-client